Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143695.roa
File: AS143695.roa (raw, json)
Hash identifier: MVKmMqeo0rWTd3wUlkwSXCmJlmIStDYLY754RustES8=
Subject key identifier: 76:0E:5C:CF:6E:59:E3:D8:5D:49:77:58:CC:73:C1:A8:2D:3F:CB:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C8EE16B2BE2D2914153118E82DA7F5ED895FC8B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143695.roa
Signing time: Mon 25 May 2026 02:22:42 +0000
ROA not before: Mon 25 May 2026 02:17:42 +0000
ROA not after: Mon 24 May 2027 02:22:42 +0000
asID: 143695
IP address blocks: 240a:a415::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8e:e1:6b:2b:e2:d2:91:41:53:11:8e:82:da:7f:5e:d8:95:fc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:42 2026 GMT
Not After : May 24 02:22:42 2027 GMT
Subject: CN=760E5CCF6E59E3D85D497758CC73C1A82D3FCB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:87:59:96:bf:6a:a4:30:f3:7e:34:1d:96:
2d:6d:4f:c1:45:31:37:a4:3b:50:bb:2d:0f:92:fd:
28:b5:80:27:83:8c:3a:75:df:d9:01:de:c2:9f:ab:
33:46:28:68:73:e3:21:fa:e6:de:dd:70:ef:cc:1d:
e8:d9:02:65:e6:9c:b7:02:ee:64:b9:a6:23:1f:f7:
81:fb:fa:b5:fc:9f:a8:68:62:0d:f6:fd:86:3a:e5:
4f:24:5a:27:cd:f7:ef:6a:ce:9c:8c:56:91:71:ad:
e2:41:30:64:73:bf:d5:86:56:6f:f0:48:5e:d9:87:
8a:50:2c:f1:13:d9:64:4d:d5:da:df:99:86:cb:0e:
f9:1f:07:a0:61:d4:c3:1b:98:08:3d:bd:2e:db:9b:
9a:8c:25:a3:45:d3:2f:02:b9:68:bf:fb:60:e9:a6:
6d:53:3e:07:68:56:92:10:a2:c3:21:a6:2f:40:fa:
e1:b3:ef:e8:69:09:46:4a:53:bc:8e:4a:1d:b6:08:
64:9d:83:f8:d7:9c:86:d9:9b:55:c3:3f:bf:e0:8a:
db:98:2e:85:b9:02:a8:f8:fd:1d:9c:26:0d:a5:eb:
50:2f:b7:3d:43:a0:73:78:48:80:ea:8c:ee:fa:9f:
8b:69:ef:47:45:2e:a1:6a:fe:99:4b:83:c3:64:33:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0E:5C:CF:6E:59:E3:D8:5D:49:77:58:CC:73:C1:A8:2D:3F:CB:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a415::/32
Signature Algorithm: sha256WithRSAEncryption
9b:a1:11:7b:0b:cb:aa:96:1e:fa:b5:f5:5d:48:0b:cb:c7:9f:
7d:1a:46:b4:67:fc:ae:20:de:75:04:24:b5:87:95:13:af:f7:
45:d1:11:49:7a:94:69:97:51:4d:a8:43:3d:fb:46:54:21:42:
7b:50:9e:35:1f:e4:47:df:61:2e:5d:4f:9c:62:af:86:f3:91:
26:3b:46:a3:4e:fa:aa:12:0b:c5:89:7f:2c:2b:45:6e:ee:7f:
00:de:9c:d9:e8:8a:c3:20:72:04:e0:3e:5a:84:07:ec:0e:1a:
32:33:ec:80:63:f6:e9:43:cf:e3:fd:ce:99:59:b6:06:c8:42:
0e:62:ad:f7:01:c2:f2:cb:52:d0:1d:60:8a:4c:37:99:8f:41:
b6:e0:7b:97:27:c9:05:55:6e:ec:31:75:e8:93:7b:21:0b:e4:
c3:ca:7c:82:13:71:15:10:bb:8b:0d:46:12:c4:54:1f:f2:94:
2d:47:10:52:b8:3a:3c:25:2f:e3:9c:fa:30:40:8a:a3:6f:26:
e4:e7:18:1d:24:2a:0a:8a:c7:ac:56:e1:d6:77:89:fe:fc:3e:
be:5e:98:1f:fb:8f:74:b3:d2:12:d9:6d:8a:67:c0:30:ca:34:
42:5e:d5:47:7c:51:8e:0e:3c:e7:a4:dc:91:5e:bd:5b:89:71:
d4:25:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:18 2026 by rpki-client